Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
File: 0lqeLErIvAK8P_iSWsExdNLUeMQ.mft (raw, json)
Hash identifier: Xmvg08pcCtIdaERKrdvaNkO73qHIb/SElKoL/ER4yuE=
Subject key identifier: 7A:9A:3A:07:5D:1A:21:32:1B:D8:6D:58:5A:CA:8F:06:99:CD:F5:65
Authority key identifier: D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
Certificate issuer: /CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Certificate serial: 019D9886DD61CC8C9CB4F2668227121EEA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
Manifest number: 0881
Signing time: Thu 16 Apr 2026 23:01:08 +0000
Manifest this update: Thu 16 Apr 2026 23:01:08 +0000
Manifest next update: Fri 17 Apr 2026 23:01:08 +0000
Files and hashes: 1: 0lqeLErIvAK8P_iSWsExdNLUeMQ.crl (hash: o7HGj7TR4a/BnFEZO3f+Jf/bihrcDxTIxrPnNQHK17c=)
2: JNb8qAOe82PBo3QGsaNX-y91s-c.roa (hash: N4b3iRyhTXcqX/rj0VSG64RSyTYz/SivUVU9/ij649s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:dd:61:cc:8c:9c:b4:f2:66:82:27:12:1e:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d25a9e2c4ac8bc02bc3ff8925ac13174d2d478c4
Validity
Not Before: Apr 16 23:01:08 2026 GMT
Not After : Apr 17 23:01:08 2026 GMT
Subject: CN=7a9a3a075d1a21321bd86d585aca8f0699cdf565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e6:c4:73:11:de:f0:a4:28:0b:3d:3a:40:a2:
34:c3:47:a0:fb:6d:38:78:41:93:1a:53:52:e3:db:
c7:bf:db:d4:58:2c:17:44:f6:05:d6:bb:90:2d:91:
af:f4:e1:e8:6d:6c:81:3b:a2:f2:5e:09:69:f6:81:
8f:09:2a:da:10:24:e9:c1:bf:95:ae:80:80:5e:e1:
ab:73:45:ed:53:77:6e:61:70:b8:38:9e:39:02:fd:
c4:b3:eb:72:ef:72:ae:a0:7c:fa:a2:85:a6:6a:13:
cb:71:a4:18:07:75:ac:15:f1:8b:14:46:87:c9:33:
3a:4d:4a:e8:41:94:10:2a:9e:f6:f6:e4:92:06:63:
1e:07:dd:84:b2:8a:0c:f9:ad:45:96:02:ab:5f:32:
a5:9b:2e:92:b7:48:4c:da:a8:10:76:67:5c:1f:6e:
32:b6:23:77:d8:70:0e:77:c0:f9:c5:23:be:d5:d6:
c0:47:e5:7c:10:bf:10:b3:0d:f5:af:c9:00:62:6b:
58:07:77:a6:82:44:b2:4c:94:81:fd:97:15:d4:b7:
d9:83:c8:e1:8c:2a:e1:0a:ba:1b:75:29:88:bc:24:
93:b2:e8:61:1e:8a:fa:6f:b9:b5:64:f0:07:1c:b7:
ea:03:fe:bf:ec:32:70:e6:42:93:19:b5:ca:5d:bb:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9A:3A:07:5D:1A:21:32:1B:D8:6D:58:5A:CA:8F:06:99:CD:F5:65
X509v3 Authority Key Identifier:
keyid:D2:5A:9E:2C:4A:C8:BC:02:BC:3F:F8:92:5A:C1:31:74:D2:D4:78:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lqeLErIvAK8P_iSWsExdNLUeMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b2582f-586b-436a-a6e3-e069ee107add/1/0lqeLErIvAK8P_iSWsExdNLUeMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:58:1e:e8:c2:7a:e0:d7:6b:22:b7:f6:b7:6d:e6:eb:fc:26:
86:5c:ab:d4:3d:01:6a:eb:0c:b7:4e:a6:e3:0a:f0:fc:f3:39:
24:62:11:73:26:97:26:1f:40:bb:6d:6c:62:28:d2:f7:59:a2:
4e:f0:dd:9e:9c:a1:d6:f0:bb:e9:5f:2b:49:a0:b5:de:f8:c8:
5f:95:70:54:65:b1:f3:c0:c4:6a:e7:56:25:d7:ba:80:a4:a9:
2a:b3:8e:1f:52:b2:9d:4e:cf:40:97:e6:5e:5a:01:eb:d5:ec:
22:4b:2a:5f:36:bf:cb:2f:73:ff:dd:30:e6:79:9f:e0:0e:2a:
bb:65:a9:6a:0f:5e:6f:a3:a1:50:a9:28:06:31:d5:5c:56:00:
f5:40:62:12:0a:bb:a5:7d:8c:f4:94:57:8f:01:06:38:78:03:
07:2c:b2:54:fb:4c:18:68:cb:f5:31:37:42:4c:71:21:d3:68:
56:80:cf:62:fc:3d:c5:eb:d8:34:4c:a5:7d:4e:c8:23:7b:92:
e5:2d:56:4e:cd:5d:99:1f:c4:4d:28:58:bf:e6:d2:03:dc:97:
02:7c:48:50:b4:bd:f6:f7:cc:4b:28:f8:63:d0:c4:59:04:28:
e7:e8:d3:fe:d7:f9:4b:45:9f:df:dc:4c:e3:cc:f0:a1:07:3f:
ef:ee:23:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Yht1hzIyctPJmgicSHupZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNWE5ZTJjNGFjOGJjMDJiYzNmZjg5MjVhYzEzMTc0ZDJk
NDc4YzQwHhcNMjYwNDE2MjMwMTA4WhcNMjYwNDE3MjMwMTA4WjAzMTEwLwYDVQQD
Eyg3YTlhM2EwNzVkMWEyMTMyMWJkODZkNTg1YWNhOGYwNjk5Y2RmNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvubEcxHe8KQoCz06QKI0w0eg+204
eEGTGlNS49vHv9vUWCwXRPYF1ruQLZGv9OHobWyBO6LyXglp9oGPCSraECTpwb+V
roCAXuGrc0XtU3duYXC4OJ45Av3Es+ty73KuoHz6ooWmahPLcaQYB3WsFfGLFEaH
yTM6TUroQZQQKp729uSSBmMeB92EsooM+a1FlgKrXzKlmy6St0hM2qgQdmdcH24y
tiN32HAOd8D5xSO+1dbAR+V8EL8Qsw31r8kAYmtYB3emgkSyTJSB/ZcV1LfZg8jh
jCrhCrobdSmIvCSTsuhhHor6b7m1ZPAHHLfqA/6/7DJw5kKTGbXKXbs/YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHqaOgddGiEyG9htWFrKjwaZzfVlMB8GA1UdIwQY
MBaAFNJanixKyLwCvD/4klrBMXTS1HjEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMt
ZTA2OWVlMTA3YWRkLzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iMjU4MmYtNTg2Yi00MzZhLWE2ZTMtZTA2OWVlMTA3YWRk
LzEvMGxxZUxFckl2QUs4UF9pU1dzRXhkTkxVZU1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFge6MJ6
4NdrIrf2t23m6/wmhlyr1D0BausMt06m4wrw/PM5JGIRcyaXJh9Au21sYijS91mi
TvDdnpyh1vC76V8rSaC13vjIX5VwVGWx88DEaudWJde6gKSpKrOOH1KynU7PQJfm
XloB69XsIksqXza/yy9z/90w5nmf4A4qu2Wpag9eb6OhUKkoBjHVXFYA9UBiEgq7
pX2M9JRXjwEGOHgDByyyVPtMGGjL9TE3QkxxIdNoVoDPYvw9xevYNEylfU7II3uS
5S1WTs1dmR/ETShYv+bSA9yXAnxIULS99vfMSyj4Y9DEWQQo5+jT/tf5S0Wf39xM
48zwoQc/7+4jww==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:48 2026 by rpki-client